$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/dY95z5Pqc429Sw0EFxqDP8jocZU.roa File: dY95z5Pqc429Sw0EFxqDP8jocZU.roa (raw, json) Hash identifier: t9xCoox3m6bxEd3jhNj1/0sS08henngTGPemBsAg52Q= Subject key identifier: 75:8F:79:CF:93:EA:73:8D:BD:4B:0D:04:17:1A:83:3F:C8:E8:71:95 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0355 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/dY95z5Pqc429Sw0EFxqDP8jocZU.roa Signing time: Fri 01 Aug 2025 01:43:42 +0000 ROA not before: Fri 01 Aug 2025 01:43:42 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 23788 IP address blocks: 202.148.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 853 (0x355) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:43:42 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=758F79CF93EA738DBD4B0D04171A833FC8E87195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:72:a8:67:15:66:ac:92:03:35:cb:8b:78:a3: 46:86:40:d2:dc:d3:db:ef:80:bb:b5:0b:9f:c1:ca: b9:e8:ee:d0:10:e3:e7:31:10:ac:62:44:9f:28:72: c7:54:de:de:5b:37:6f:b1:20:9b:ff:48:66:44:57: 3d:db:be:ae:3e:de:82:e6:40:29:78:27:1b:94:3c: dd:af:0c:4d:64:e9:8f:b9:a5:e4:3c:47:84:2d:7c: cf:7c:1a:e8:df:7c:2c:94:6a:b3:9d:e3:6b:df:72: c4:70:56:d4:b0:45:56:f1:1a:85:0c:67:e4:62:04: a0:59:aa:d9:53:f0:83:aa:d3:e9:4b:99:4f:c2:2b: 11:4b:c9:70:6c:62:52:3f:9c:a6:71:ac:08:98:eb: 72:4b:4a:66:ec:1a:4f:0f:11:40:b2:6e:c5:e1:ae: 11:2f:d8:f0:0f:d1:83:85:2e:50:27:6a:ac:2c:5f: d6:65:bf:d8:a4:93:5c:41:9b:9b:2f:d1:e2:0e:8d: a3:bc:ec:fd:2e:5f:4c:3d:38:fa:11:01:54:fb:cd: ef:c8:9e:7f:b6:38:d3:ca:15:ad:92:92:c1:3a:03: cd:b3:6b:5d:54:b5:14:bc:90:bc:2f:b0:8a:26:2e: 93:bf:77:09:11:4c:a7:1e:64:71:72:fc:bf:53:78: c2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8F:79:CF:93:EA:73:8D:BD:4B:0D:04:17:1A:83:3F:C8:E8:71:95 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/dY95z5Pqc429Sw0EFxqDP8jocZU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.148.240.0/20 Signature Algorithm: sha256WithRSAEncryption c8:e6:7d:d9:82:22:1f:4c:49:cd:4c:67:40:fa:ef:16:98:b6: 95:7e:06:c1:98:b5:c3:1b:ff:e1:c8:f7:18:e9:f6:cf:77:b6: 7c:4c:50:77:68:fd:d2:18:55:ff:3e:ec:c8:1b:cf:05:5c:86: 60:fb:5c:d5:30:b8:a8:a8:85:1f:fa:9c:45:ee:2e:4a:7f:6d: 14:81:30:a5:35:26:e9:ba:5c:1e:90:f5:2e:74:6a:34:43:48: 20:3e:40:89:ff:64:a2:df:50:7f:80:d7:c1:b7:60:f2:30:25: 71:41:5b:0e:dd:75:cd:5d:c7:7f:0d:82:1c:aa:3b:b5:ce:14: da:d4:78:89:31:5b:26:48:92:d2:62:ab:c7:21:8d:66:25:d1: 27:76:25:a5:fd:99:54:ca:c9:17:36:88:6d:d0:9a:49:a4:31: 54:7b:4d:c0:65:84:9c:8f:da:75:b3:3d:ac:37:c7:ca:a4:28: f1:39:73:65:b7:1d:f5:42:d9:42:ed:79:60:fc:1e:2b:f5:03: 75:8d:32:96:5e:20:bd:ab:a3:ed:8d:98:44:90:3a:02:f5:41: 1e:0e:ca:62:3c:52:85:b4:65:3f:50:66:1b:da:10:1e:8f:5b: 8a:26:9b:7d:8e:54:9b:02:0d:fc:72:6c:a1:a8:97:b7:99:5b: 18:55:05:08 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA1UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTQzNDJaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDc1OEY3OUNGOTNFQTcz OERCRDRCMEQwNDE3MUE4MzNGQzhFODcxOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6cqhnFWaskgM1y4t4o0aGQNLc09vvgLu1C5/Byrno7tAQ4+cx EKxiRJ8ocsdU3t5bN2+xIJv/SGZEVz3bvq4+3oLmQCl4JxuUPN2vDE1k6Y+5peQ8 R4QtfM98GujffCyUarOd42vfcsRwVtSwRVbxGoUMZ+RiBKBZqtlT8IOq0+lLmU/C KxFLyXBsYlI/nKZxrAiY63JLSmbsGk8PEUCybsXhrhEv2PAP0YOFLlAnaqwsX9Zl v9ikk1xBm5sv0eIOjaO87P0uX0w9OPoRAVT7ze/Inn+2ONPKFa2SksE6A82za11U tRS8kLwvsIomLpO/dwkRTKceZHFy/L9TeMLbAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUdY95z5Pqc429Sw0EFxqDP8jocZUwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL2RZOTV6NVBxYzQyOVN3MEVGeHFEUDhqb2NaVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATKlPAwDQYJKoZIhvcNAQELBQADggEBAMjmfdmCIh9MSc1MZ0D67xaYtpV+ BsGYtcMb/+HI9xjp9s93tnxMUHdo/dIYVf8+7MgbzwVchmD7XNUwuKiohR/6nEXu Lkp/bRSBMKU1Jum6XB6Q9S50ajRDSCA+QIn/ZKLfUH+A18G3YPIwJXFBWw7ddc1d x38NghyqO7XOFNrUeIkxWyZIktJiq8chjWYl0Sd2JaX9mVTKyRc2iG3QmkmkMVR7 TcBlhJyP2nWzPaw3x8qkKPE5c2W3HfVC2ULteWD8Hiv1A3WNMpZeIL2ro+2NmESQ OgL1QR4OymI8UoW0ZT9QZhvaEB6PW4omm32OVJsCDfxybKGol7eZWxhVBQg= -----END CERTIFICATE-----Generated at Mon Aug 11 13:28:35 2025 by rpki-client